MAC kernel option

[Christian S.J. Peron]

On Sun, Sep 18, 2005 at 06:06:13PM +0100, Robert Watson wrote:
> 
> The only policy I've written that tries to use labels with a run-time load 
> is mac_partition, which knows that if it sees a '0' in the label slot that 
> this means an un-partitioned process.  Do you use vnode labels (etc) for 
> mac_chkexec to cache EA data, or just direct EA access?
> 

Currently I am using direct EA access.

-- 
Christian S.J. Peron
csjp at FreeBSD.ORG
FreeBSD Committer
FreeBSD Security Team
To Unsubscribe: send mail to majordomo at trustedbsd.org
with "unsubscribe trustedbsd-discuss" in the body of the message